Re: Local Vs Remote Access / IIS to control password

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Nirosh (nirosht_at_yahoo.com)
Date: 05/18/04 

Date: 18 May 2004 07:21:37 -0700

The application works fine when I access it locally(i:e
http://localhost/test.asp) but when I access it remotely it promts the
windows login window..

As for the ActiveX EXE previleges I don't know where to specify the
users who can use...

Can you give me the instruction to manually synchronize user account
pwd's?

What I don't understand is that if the app is working via IIS locally
what could it be lacking to work for remote request and in that matter
the IP address is used to identify the webpage....

Please help me on this issue
I would very much appreciate any help.

Thanks
Nirosh

"David Wang [Msft]" <someone@online.microsoft.com> wrote in message news:<OdUm7bIPEHA.736@tk2msftngp13.phx.gbl>...
> Can you define what privileges your ActiveX EXE actually needs and make sure
> that IIS has the necessary privileges to execute your code? This is
> something that YOU should know and configure.
>
> #1 does not make sense. It sounds like you're saying that your ActiveX EXE
> needs credentials as a certain user, which should not use "allow IIS to
> control password".
> #2 does not make sense. IIS does not need to control the password to allow
> remote access. When you allow anonymous access, it means that IIS will use
> the defined username/password to execute code. You give the
> username/password for IIS to use -- and if you check "control the password",
> it means that IIS will elevate privileges to run as that username without
> the password. If anonymous does not work when you uncheck "control the
> password", it means that the username/password you gave to IIS is OUT OF
> SYNC with the real username/password -- so you should manually synchronize
> the two.
>
> Bottom line -- I think that you just need to define what privileges your
> ActiveX EXE actually needs, create a local or domain user that satisfies
> those privileges, and set the username/password inside of IIS as the
> anonymous user, and it should work. If you have further COM configurations,
> you should also make them consistent with the IIS configuration as far as
> identity goes.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Nirosh" <nirosht@yahoo.com> wrote in message
> news:a184965a.0405171324.1daca1f6@posting.google.com...
> I have created an application that captures information from ASP page
> and
> produce result for the request. The ASP page instantiate ActiveX EXE
> based class and calls a method...
> Now this web application works fine locally but in order for it to
> work even locally we had to make some changes to IIS.
>
> 1. We had to disable "Allow IIS to control password" for IIS Anonymous
> accounts(IUSR_ComputerName/IWAM_ComputerName) with the exception of
> the 'DOMAINNAME.ComputerName' account.
>
> 2.But we need to allow IIS to control the password if we need to allow
> remote access..
>
> If I force the application not to allow IIS to control password then I
> am getting 'Application-defined or object-defined error'.
>
> Does anyone familiar with this issue?
> Please help me on resolving the issue.
>
> Thanks in advance
>
> Nirosh

Relevant Pages

  • Re: Local Vs Remote Access / IIS to control password
    ... It is not clear whether "remote access" is via a server name, dotted IP, ... What I don't understand is that if the app is working via IIS locally ... IIS does not need to control the password to ...
    (microsoft.public.inetserver.iis)
  • Manifest problems after copying in new remote object
    ... I have a control that is remoted and is hosted in IIS. ... When I copy any new parts of either the program or the remote objects ... It is usually a load error that appears to really be ...
    (microsoft.public.dotnet.framework)
  • Re: Local Vs Remote Access / IIS to control password
    ... Can you define what privileges your ActiveX EXE actually needs and make sure ... that IIS has the necessary privileges to execute your code? ... It sounds like you're saying that your ActiveX EXE ... IIS does not need to control the password to allow ...
    (microsoft.public.inetserver.iis)
  • webservice problem
    ... an activex exe class already running on the same computer of iis. ... When a vb or asp client calls the webservice, ... web service dll. ...
    (microsoft.public.vb.6.webdevelopment)
  • Re: Automate Connection Access
    ... control on a plain SMTP 6.0 service? ... Anyway, IIS exposes the Connection Control list via the Metabase property `IPSecurity.` Unlike many other props, even with direct Metabase editing enabled, though, you can't easily automate the editing of metabase.xml for this property, because it is of the binary data type IPSECLIST rather than plain-text. ... but you don't need to know that, because IIS handily serves up the property via ADSI scripting without you having to do any binary encoding yourself. ... With ADSI and the IIS namespace, you can append to the current array of denied IPs, re-put the options into IIS, and the settings take effect immediately. ...
    (microsoft.public.inetserver.iis.smtp_nntp)